Microsoft Intune & windows Engineer

Saxon Global•Los Angeles, CA

About The Position

We are seeking an experienced Microsoft Intune & Windows 365 Customer Engineer to deliver modern endpoint and Cloud PC solutions for enterprise customers. This role is Windows‑centric , with strong focus on Windows 10/11, Windows 365, identity‑driven access, and endpoint security , supported by Microsoft Intune. The ideal candidate has hands‑on experience designing, deploying, and operating Windows 365 Cloud PCs at scale, integrating Intune, Microsoft Entra ID, and Conditional Access to deliver secure, performant, and reliable end‑user experiences.

Requirements

Strong hands‑on experience with Microsoft Intune and Windows endpoint management .
Demonstrated experience deploying and supporting Windows 365 Cloud PCs .
Expertise in: Windows Autopilot and Autopatch Endpoint Security and compliance Conditional Access and identity‑driven controls
Experience supporting enterprise customers in a partner, MSP, or consulting environment .
Excellent troubleshooting, communication, and customer engagement skills.
Strong experience with Microsoft Entra ID .

Nice To Haves

Experience managing iOS/iPadOS, Android Enterprise, or macOS using Intune.
Familiarity with MAM / App Protection Policies .
Migration experience from third‑party MDM, VDI, or DaaS platforms.
Microsoft certifications related to Endpoint, Security, or Azure Virtual Desktop.
SCCM/Configuration Manager experience.

Responsibilities

Design, implement, and support Microsoft Intune and Windows 365 solutions for enterprise customers.
Act as a customer‑facing engineer , delivering deployments, migrations, and operational support.
Provide architectural guidance and hands‑on execution for Cloud PC and modern Windows management scenarios.
Design and deploy Windows 365 Cloud PCs , including: Business, Enterprise, and Frontline offerings Provisioning policies and device assignment strategies Image management and lifecycle planning
Demonstrate strong understanding of Windows 365 licensing and SKUs , including: Windows 365 Business vs Windows 365 Enterprise capabilities and limitations Frontline Cloud PC scenarios (dedicated vs shared usage models) Cloud PC sizing considerations (vCPU, RAM, storage) aligned to user personas and workloads Licensing prerequisites and dependencies (Intune, Entra ID, Windows Enterprise, Hybrid Benefit)
Configure and support: Connectivity models (Microsoft‑hosted and Azure Network Connection) Performance optimization and end‑user experience troubleshooting Access scenarios across multiple device types
Integrate Windows 365 with: Microsoft Intune for device management Microsoft Entra ID for identity and access Conditional Access and Zero Trust controls
Troubleshoot Cloud PC provisioning issues, sign‑in failures, performance concerns, and policy application problems.
Support migration scenarios from: Traditional physical desktops On‑premises VDI or third‑party DaaS solutions
Implement and support Windows 10/11 management using Intune, including: Windows Autopilot (User‑Driven, Pre‑Provisioning) Windows Autopatch Update rings, Feature Updates, and Quality Updates
Configure Endpoint Security policies: Microsoft Defender Antivirus Firewall, ASR rules, and BitLocker Security Baselines
Deploy and manage applications (Win32, Store, Microsoft 365 Apps).
Design compliance policies and integrate with Conditional Access.
Leverage Intune Suite features such as: Remote Help Endpoint Analytics Endpoint Privilege Management
Implement and troubleshoot: Single Sign‑On (SSO) Conditional Access policies aligned with Zero Trust principles Understanding of device trust, compliance‑based access, and identity‑driven endpoint management models.
Troubleshoot complex issues across: Windows endpoints Intune Windows 365 Cloud PCs
Analyze logs and diagnostics using: Intune troubleshooting tools Event Viewer and MDMDiagnosticsTool
Automate operational tasks using PowerShell and Microsoft Graph (preferred).
Maintain clear customer‑ready documentation and handover guidance.